
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
File: MksgMsOPsX9C-IMqTCHh8NXxnuA.mft (raw, json)
Hash identifier: XuK02AfG6abqcqXARr6+1c/yLFwTCfPaYhq3FdNOED8=
Subject key identifier: E9:C2:1E:4E:E4:23:71:16:70:96:B7:9E:EB:B7:B5:D1:84:AB:1F:9C
Authority key identifier: 32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
Certificate issuer: /CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Certificate serial: 0199FB7C99023A9E41CA0F8CF87A72BDD766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
Manifest number: 0387
Signing time: Sun 19 Oct 2025 08:01:10 +0000
Manifest this update: Sun 19 Oct 2025 08:01:10 +0000
Manifest next update: Mon 20 Oct 2025 08:01:10 +0000
Files and hashes: 1: 1-5n0KWaGHCDQYhl2aLfMjhVyMRI.roa (hash: KATmxtMp2ikC0o4XIGyQU9bJkWtT8ILR3+Dm38ZRLnA=)
2: MksgMsOPsX9C-IMqTCHh8NXxnuA.crl (hash: kjVXNtPV2MJI6kwqhADsGz1SjXVUPb0N9s2UIiewa4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:99:02:3a:9e:41:ca:0f:8c:f8:7a:72:bd:d7:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Validity
Not Before: Oct 19 08:01:10 2025 GMT
Not After : Oct 20 08:01:10 2025 GMT
Subject: CN=e9c21e4ee42371167096b79eebb7b5d184ab1f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c0:6c:c2:d6:8e:4d:08:ff:02:e1:be:da:8a:
4b:d9:13:1e:82:d1:7d:39:54:84:62:10:e9:f2:ec:
8d:39:c4:96:45:d7:9f:1d:08:60:f1:1b:06:7e:fe:
a7:ae:5c:26:02:0a:20:d6:72:a1:c9:1c:4b:9a:6c:
f9:e9:4d:b5:ab:46:28:c6:12:80:22:54:68:09:28:
d2:50:32:d3:05:aa:2b:83:b5:8b:72:da:d1:0c:26:
39:70:90:a5:bd:cf:2a:22:13:2c:24:98:81:f9:55:
65:76:f6:dc:c0:4e:ca:6c:69:ec:e7:27:ff:45:1a:
34:6e:c1:ab:3b:ad:39:54:b3:6c:09:3e:83:e6:c6:
9d:3c:8d:0d:b2:e4:b7:37:40:0f:e4:56:7f:fe:97:
b2:4b:e4:7f:4b:fa:e9:ad:2a:22:9e:0c:0b:c5:18:
8f:61:fb:58:10:3b:e7:f1:52:9a:07:5e:e3:69:f3:
2d:cf:bd:34:03:e3:b1:59:9b:17:64:56:aa:8e:d3:
f1:21:f6:78:80:aa:83:8a:22:89:4c:42:d3:4c:67:
9c:17:6d:87:d9:7a:e1:54:e7:23:a2:07:16:ef:1e:
a0:69:6c:3c:e3:a3:c4:1a:a9:6c:bb:6b:48:13:f7:
5a:d1:42:89:28:e9:d5:94:18:8b:c6:43:05:1a:8d:
b1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C2:1E:4E:E4:23:71:16:70:96:B7:9E:EB:B7:B5:D1:84:AB:1F:9C
X509v3 Authority Key Identifier:
keyid:32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a4:7d:22:8e:75:81:c9:c0:b4:b0:69:9c:9c:72:bb:3e:c0:
31:ed:33:af:6d:55:fc:70:b6:ea:ad:f2:49:27:e7:13:94:bf:
68:17:26:8a:70:e3:47:6b:1e:47:ec:08:32:0b:5c:af:87:0d:
57:9b:e8:04:9b:80:ee:9b:d1:63:94:df:4a:d0:4b:12:a9:fc:
ed:f2:04:53:4e:c1:d3:13:d7:98:32:f3:52:cb:86:66:f0:05:
d7:44:9c:fe:99:3b:76:b5:7e:ab:68:4d:15:45:62:fa:e1:d6:
1e:20:04:88:94:db:eb:a2:55:54:e6:16:27:29:c3:d5:5b:85:
5a:1d:43:71:2e:3d:15:1d:fc:6f:ad:a0:34:de:85:af:fd:bd:
95:cd:1e:59:03:d9:2b:0d:ef:29:a1:dc:05:aa:67:ce:77:c1:
ad:5d:8e:7d:bb:71:9f:1f:a4:ae:81:96:8d:6b:c0:50:7d:ec:
e9:0f:42:d1:fd:52:5e:37:96:28:5d:bf:19:77:12:71:d2:f5:
7e:89:20:1d:2c:7c:cf:31:03:4e:77:a8:3a:3e:ef:d3:95:cd:
37:7c:f2:8c:5d:fd:a3:19:b7:0b:aa:7b:7f:b5:7d:dc:7c:5d:
8d:77:6a:73:09:fd:b0:d7:cf:a9:97:c1:04:c3:af:aa:7d:99:
ad:55:5c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:25 2025 by rpki-client